s3: smbd - smb1 - fix read of deleted memory in reply_writeclose().